unode / firefox_decrypt
Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles
unode / firefox_decrypt
asaotomo / ZipCracker
ZipCracker是Hx0战队出品的一款功能强大的Zip密码破解工具。它集成了字典攻击、掩码攻击、短明文 CRC32 枚举恢复、已知明文攻击、套娃ZIP解压等多种破解模式，并能自动修复伪加密文件。凭借其高性能与多功能的特点，ZipCracker已成为CTF比赛中的一把利器。（ZipCracker by Hx0 team is a tool for cracking passwords on Zip files, great for CTF competitions.）
ihebski / DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
scito / extract_otp_secrets
Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.
duyet / bruteforce-database
Bruteforce database
DaoSword / Time-Series-Forecasting-and-Deep-Learning
Resources about time series forecasting and deep learning.
mlcsec / ResetSpy
Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal
blacklanternsecurity / TREVORspray
TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!
ADScanPro / adscan
Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.
hynek / argon2-cffi
Secure Password Hashes for Python
Rust505 / hidden-icloud
iCloud Hidden Open Menu Bypass No jailbreak. MobileGestalt exploit for iOS 15.0–18.7.4 & 26.2 Beta 1. Hides Apple ID, removes password prompt. Does NOT disable FMI. Requirements: Open Menu, Wi-Fi. Steps: run tool → reboot → Reset All Settings (NOT Erase!) → sign in new ID. ⚠️ Don't update to 26.2 Beta 2+ (patched). Legal use only.
pinterest / snappass
Share passwords securely
blacklanternsecurity / TREVORproxy
A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses!
pyca / bcrypt
Modern(-ish) password hashing for your software and your servers
FLOCK4H / Freeway
WiFi Penetration Testing & Auditing Tool
nolze / msoffcrypto-tool
Python tool and library for decrypting and encrypting MS Office files using passwords or other keys
golbin / rekey
Reissue an API key with one command and update it everywhere it is used (1Password + templates)
magicsword-io / Magic-Atomics
Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.
kaffeindecaf / W0lfSword
iOS kernel exploit toolkit | DarkSword R/W | SSV Bypass | XPF offset verification
django-otp / django-otp
A pluggable framework for adding two-factor authentication to Django using one-time passwords.
dmdhrumilmistry / pyhtools
A Python Hacking Library consisting of network scanner, arp spoofer and detector, dns spoofer, code injector, packet sniffer, network jammer, email sender, downloader, wireless password harvester credential harvester, keylogger, download&execute, ransomware, data harvestors, etc.